PRIVACY POLICY

HEATHER NY LLC

Effective Date: November 5, 2026  |  Last Updated: November 6, 2026

HEATHER NY LLC (“we,” “us,” or “our”), operating as Heather NYC, is committed to protecting the privacy of visitors to our website and customers who use our floral services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://heather.nyc/, place an order, request a quote for events or weddings, or contact us by form, email, or phone.

We comply with applicable United States federal laws and the laws of the State of New York, including the New York Stop Hacks and Improve Electronic Data Security Act (the “SHIELD Act,” N.Y. Gen. Bus. Law §§ 899-aa and 899-bb) and related data-breach notification requirements. Our business is located in Staten Island, New York (ZIP 10314).

1. Information We Collect

We may collect information that you provide directly to us, including:

Personal Information: your name, billing and delivery address, email address, and telephone number(s) submitted when placing an order, requesting a quote, or contacting us.

Order and Event Information: details about flower arrangements, bouquets, wedding or event florals, delivery preferences, occasion, recipient information, and any special instructions you provide.

Payment Information: payment card details or other payment method information (processed securely by our payment processors; we do not store full card numbers).

Communications: the content of messages, emails, or phone conversations you share with our team.

Automatic Data: IP address, browser type, operating system, and usage data collected through cookies and similar technologies when you visit our website.

2. How We Use Your Information

To process and fulfill flower orders, including arranging delivery and providing order confirmations.

To respond to inquiries, prepare quotes for weddings, events, or custom arrangements, and schedule consultations.

To provide, maintain, and improve our floral products and services (retail shop, weddings, and event florals).

To send order updates, delivery notifications, appointment or consultation reminders, and related service communications.

To process payments and maintain billing and transaction records.

To comply with our legal, accounting, and reporting obligations under New York and federal law.

3. How We Share Your Information

We do not sell your personal information. We may share information with: (a) service providers who perform work on our behalf (e.g., payment processing, website hosting, delivery partners or courier services); (b) florists or suppliers involved in fulfilling your order when necessary; (c) legal authorities when required by law or to protect our rights; and (d) successors in the event of a merger, acquisition, or asset sale. All third parties are expected to handle your information with appropriate care and confidentiality consistent with this Policy and applicable law.

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate the site, process online orders, analyze traffic, and improve user experience. You can control cookies through your browser settings; disabling them may limit some functionality, including the ability to complete purchases online.

5. Your Privacy Rights

New York does not currently have a comprehensive consumer privacy statute that grants statewide rights of access, correction, deletion, or opt-out of “sale” or “sharing” comparable to those in certain other states (e.g., California). However, as a matter of good practice and courtesy, we will reasonably respond to requests from individuals to access, correct, or delete the personal information we hold about them, subject to applicable legal obligations and our legitimate business needs (for example, we may retain order records as required by tax or accounting rules).

If you are a resident of a state that grants specific privacy rights, or if you simply wish to exercise a request regarding your information, please contact us using the information below. We will respond in accordance with applicable law.

6. Children’s Privacy (COPPA)

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal information, please contact us so we can delete it.

7. Data Security

In accordance with the New York SHIELD Act, we implement reasonable administrative, technical, and physical safeguards designed to protect the security, confidentiality, and integrity of private information. These safeguards are appropriate to the size and complexity of our business, the nature and scope of our activities, and the sensitivity of the information we collect. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy (including order fulfillment and customer service), to comply with our legal obligations under New York and federal law (including tax and accounting requirements), to resolve disputes, and to enforce our agreements.

9. Data Breach Notification

In the event of a breach of the security of computerized data that includes private information of a New York resident, we will provide notice to affected individuals in the most expedient time possible and without unreasonable delay, and in any event within 30 days of discovery of the breach (subject to any law-enforcement delay), as required by the SHIELD Act (N.Y. Gen. Bus. Law § 899-aa). We will also notify the New York Attorney General, the Department of State, and the Division of State Police as required, and consumer reporting agencies if more than 5,000 New York residents are affected.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last Updated” date. We encourage you to review this page periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, or if you wish to make a request regarding your personal information, please contact us:

HEATHER NY LLC

d/b/a Heather NYC

3801 C Victory Blvd

Staten Island, NY 10314

Phone: +1 718-510-3942

Email: eva@heather.nyc

Website: https://heather.nyc/

This Privacy Policy is provided for informational purposes and does not constitute legal advice. Businesses should consult qualified New York counsel to ensure ongoing compliance with the SHIELD Act and other applicable requirements.